Disclosure of information from student records is governed by the Federal Family Educational Rights and Privacy Act (FERPA) and in part by the State of California Education Code. UCB maintains a campus policy governing disclosure of information from student records. This policy provides reasonable interpretations of those laws and protects the student’s right of privacy as guaranteed by the State of California’s constitution. For more information, the entire policy can be found at: http://registrar.berkeley.edu/ferpa.html
You must not release any private student information to any person or organization without the student’s written consent, and must only handle all UCB information for authorized work-related purposes, according to the Minimum Security Standards for Electronic Information (MSSEI).
Private student information is classified at the P3 protection level under UC Berkeley's data classification standards, and includes, but is not limited to, academic records, information in personnel files, student conduct issues, SID, certain personal contact information, as well as other sensitive information encountered while on the job. Other sensitive student information, which if exposed to unauthorized persons, causes extreme impact is classified at the P4 protection level. It includes but is not limited to Social Security Numbers, Credit Card Numbers and medical information.